CLOUDFLARE ONE IS THE FIRST SASE OFFERING MODERN POST-QUANTUM ENCRYPTION ACROSS THE FULL PLATFORM

Summary from the TLDR InfoSec newsletter

Cloudflare One is the first SASE platform to support standards-compliant post-quantum hybrid ML-KEM encryption across all major on-ramps and off-ramps, including its Secure Web Gateway, Zero Trust, and WAN use cases. The upgrade extends post-quantum protection to Cloudflare IPsec (now in closed beta) and the Cloudflare One Appliance (GA in version 2026.2.0), defending enterprise traffic against harvest-now-decrypt-later attacks ahead of NIST's 2030 deadline for deprecating RSA and ECC. The implementation follows the draft-ietf-ipsecme-ikev2-mlkem specification rather than proprietary approaches, and is available at no extra cost.